Collaborate Disseminate
Apple on Thursday said it’s introducing new child safety features in iOS, iPadOS, watchOS, and macOS as part of its efforts to limit the spread of Child Sexual Abuse Material (CSAM) in the U.S.
To that effect, the iPhone maker said it intends to begin … Continue reading Apple to Scan Every Device for Child Abuse Content — But Experts Fear for Privacy
Koo, India’s homegrown Twitter clone, recently patched a serious security vulnerability that could have been exploited to execute arbitrary JavaScript code against hundreds of thousands of its users, spreading the attack across the platform.
The vulner… Continue reading India’s Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks
Amazon earlier this April addressed a critical vulnerability in its Kindle e-book reader platform that could have been potentially exploited to take full control over a user’s device, resulting in the theft of sensitive information by just deploying a … Continue reading New Amazon Kindle Bug Could’ve Let Attackers Hijack Your eBook Reader
VMware has released security updates for multiple products to address a critical vulnerability that could be exploited to gain access to confidential information.
Tracked as CVE-2021-22002 (CVSS score: 8.6) and CVE-2021-22003 (CVSS score: 3.7), the fla… Continue reading VMware Issues Patches to Fix Critical Bugs Affecting Multiple Products
Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an adversary to acquire legitimate user names registered in the module via a brute-force attack, unaut… Continue reading Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks
Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to carry out a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Load… Continue reading A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service
Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a remote attacker to execute arbitrary code and even cause a denial-of-service (DoS) condition…. Continue reading Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs
A systematic analysis of attacks against Microsoft’s Internet Information Services (IIS) servers has revealed as many as 14 malware families, 10 of them newly documented, indicating that the Windows-based web server software continues to be a hotbed fo… Continue reading Several Malware Families Targeting IIS Web Servers With Malicious Modules
An amalgam of multiple state-sponsored threat groups from China may have been behind a string of targeted attacks against Russian federal executive authorities in 2020.
The latest research, published by Singapore-headquartered company Group-IB, delves … Continue reading Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus
A threat actor presumed to be of Chinese origin has been linked to a series of 10 attacks targeting Mongolia, Russia, Belarus, Canada, and the U.S. from January to July 2021 that involve the deployment of a remote access trojan (RAT) on infected system… Continue reading New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks